Vulnerability

CERT-In Vulnerability Note CIVN-2026-0192
Arbitrary Code Execution Vulnerability in Adobe Acrobat Reader

Original Issue Date:April 17, 2026

Severity Rating: HIGH

Software Affected

Adobe Acrobat Reader versions 26.001.21411 and earlier on Windows and macOS

Overview

A vulnerability has been reported in Adobe Acrobat Reader which could allow a remote attacker to execute arbitrary code on the targeted system.

Target Audience:
System Administrators, Organizations and end users using Adobe Acrobat Reader.

Risk Assessment:
High risk of arbitrary code execution due to remote exploitation through specially crafted PDF files.

Impact Assessment:
Potential for arbitrary code execution, system compromise, data theft, or unauthorized access.

Description

Adobe Acrobat and Reader is widely used application for viewing, printing, and managing PDF documents.

The vulnerability exists in Adobe Acrobat Reader due to improper handling of specially crafted PDF files. An attacker could exploit this flaw by tricking a user into opening a malicious PDF document.

Successful exploitation could allow an attacker to execute arbitrary code in the context of the current user.

Note: This vulnerability (CVE-2026-34621) is being actively exploited in the wild.

Solution

Apply appropriate updates as mentioned by the vendor:
https://helpx.adobe.com/security/products/acrobat/apsb26-43.html

Vendor Information

Adobe
https://www.adobe.com/

References

https://helpx.adobe.com/security/products/acrobat/apsb26-43.html

CVE Name
CVE-2026-34621

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India